199 lines
7.8 KiB
HTML
199 lines
7.8 KiB
HTML
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
|
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="fr"
|
|
lang="fr" dir="ltr">
|
|
|
|
<head>
|
|
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
|
|
<title></title><!-- metadata --><!-- style sheet links -->
|
|
|
|
<meta name="generator" content="Hors ligne" />
|
|
<meta name="version" content="Hors-ligne 0.1" />
|
|
|
|
<link rel="stylesheet" media="all" type="text/css" href="../../../../css/all.css" />
|
|
<link rel="stylesheet" media="screen" type="text/css" href="../../../../css/screen.css" />
|
|
<link rel="stylesheet" media="print" type="text/css" href="../../../../css/print.css" />
|
|
|
|
</head>
|
|
<body>
|
|
<div class="dokuwiki export">
|
|
|
|
|
|
<h1 class="sectionedit1" id="liferay">Liferay</h1>
|
|
<div class="level1">
|
|
|
|
<p>
|
|
<a href="/_detail/applications/liferay_logo.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="applications:liferay_logo.png"><img src="../../../../media/applications/liferay_logo.png" class="mediacenter" alt="" /></a>
|
|
</p>
|
|
|
|
</div><!-- EDIT1 SECTION "Liferay" [1-62] -->
|
|
|
|
<h2 class="sectionedit2" id="presentation">Présentation</h2>
|
|
<div class="level2">
|
|
|
|
<p>
|
|
<a href="http://www.liferay.com/" class="urlextern" title="http://www.liferay.com/" rel="nofollow">Liferay</a> est un portail d'entreprise.
|
|
</p>
|
|
|
|
<p>
|
|
Liferay peut utiliser <abbr title="LemonLDAP::NG">LL::NG</abbr> comme fournisseur <abbr title="Authentification unique (Single Sign On)">SSO</abbr> mais il faut gérer la création des comptes utilisateurs :
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> À la main dans les écrans d'administration de Liferay</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> Imported from an LDAP directory</div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
|
|
Of course, integration will be full if you use the LDAP directory as users backend for <abbr title="LemonLDAP::NG">LL::NG</abbr> and Liferay.
|
|
|
|
</p>
|
|
|
|
<p>
|
|
</p><p></p><div class="noteimportant">If the user is not created, or can not be created via LDAP import, the connection to Liferay will be refused. With LDAP, login, mail, first name and last name are required attributes. Si l'un est manquant, le compte ne sera pas créé.
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
Cette documentation explique seulement comment activer la partie <abbr title="Authentification unique (Single Sign On)">SSO</abbr>. Please refer to Liferay documentation to enable LDAP provisionning.
|
|
</p>
|
|
|
|
</div><!-- EDIT2 SECTION "Presentation" [63-811] -->
|
|
|
|
<h2 class="sectionedit3" id="configuration">Configuration</h2>
|
|
<div class="level2">
|
|
|
|
</div><!-- EDIT3 SECTION "Configuration" [812-838] -->
|
|
|
|
<h3 class="sectionedit4" id="liferay_administration">Administration Liferay</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
Accès à Liferay (première connexion):
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_1.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_1.png"><img src="../../../../media/documentation/liferay_1.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
Se connecter comme administrateur:
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_2.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_2.png"><img src="../../../../media/documentation/liferay_2.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
Aller dans <code>My account</code>:
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_3.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_3.png"><img src="../../../../media/documentation/liferay_3.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
Aller dans <code>Portal</code> » <code>Settings</code>:
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_4.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_4.png"><img src="../../../../media/documentation/liferay_4.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
Aller dans <code>Configuration</code> » <code>Authentication</code>:
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_5.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_5.png"><img src="../../../../media/documentation/liferay_5.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
Dans <code>General</code>, remplir au moins les informations suivantes :
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <strong>How do users authenticate?</strong>: by login</div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
</p><p></p><div class="notetip">Il est conseillé de désactiver les autres options, car les utilisateurs utiliseront le portail <abbr title="LemonLDAP::NG">LL::NG</abbr> pour modifier ou réinitialiser leur mot-de-passe.
|
|
</div></p>
|
|
</p>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_6.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_6.png"><img src="../../../../media/documentation/liferay_6.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
</p><p></p><div class="noteimportant">
|
|
You need to activate LDAP authentication, else <abbr title="Authentification unique (Single Sign On)">SSO</abbr> authentication will not work. Faire ceci dans le panneau de contrôle ou dans le fichier de configuration :
|
|
</p>
|
|
<pre class="file">ldap.auth.enabled=true</pre>
|
|
|
|
<p>
|
|
|
|
</p></div></p>
|
|
</p>
|
|
|
|
<p>
|
|
Utiliser ensuite le paragraphe <code>SiteMinder</code> pour configurer le <abbr title="Authentification unique (Single Sign On)">SSO</abbr> :
|
|
</p>
|
|
<ul>
|
|
<li class="level1"><div class="li"> <strong>Enabled</strong>: Yes</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>Import from LDAP</strong>: Yes (see <a href="#presentation" title="documentation:1.9:applications:liferay ↵" class="wikilink1">presentation</a>)</div>
|
|
</li>
|
|
<li class="level1"><div class="li"> <strong>User Header</strong>: Auth-User (case sensitive)</div>
|
|
</li>
|
|
</ul>
|
|
|
|
<p>
|
|
<a href="/_detail/documentation/liferay_7.png?id=documentation%3A1.9%3Aapplications%3Aliferay" class="media" title="documentation:liferay_7.png"><img src="../../../../media/documentation/liferay_7.png" class="mediacenter" alt="" width="600" /></a>
|
|
</p>
|
|
|
|
<p>
|
|
</p><p></p><div class="noteimportant">Ne pas oublier de sauvegarder les changements !
|
|
</div></p>
|
|
</p>
|
|
|
|
</div><!-- EDIT4 SECTION "Liferay administration" [839-2004] -->
|
|
|
|
<h3 class="sectionedit5" id="liferay_virtual_host_in_apache">Hôte virtuel Liferay dans le manager</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
Configurer l'hôte virtuel Liferay comme n'importe quel autre <a href="../../../documentation/1.9/configvhost.html" class="wikilink1" title="documentation:1.9:configvhost">hôte virtuel protégé</a>.
|
|
</p>
|
|
<pre class="code file apache"><<span class="kw3">VirtualHost</span> *:<span class="nu0">80</span>>
|
|
<span class="kw1">ServerName</span> liferay.example.com
|
|
|
|
PerlHeaderParserHandler Lemonldap::NG::Handler
|
|
|
|
...
|
|
|
|
</<span class="kw3">VirtualHost</span>></pre>
|
|
|
|
</div><!-- EDIT5 SECTION "Liferay virtual host in Apache" [2005-2301] -->
|
|
|
|
<h3 class="sectionedit6" id="liferay_virtual_host_in_manager">Hôte virtuel Liferay dans le manager</h3>
|
|
<div class="level3">
|
|
|
|
<p>
|
|
Aller dans le manager et <a href="../../../documentation/1.9/configvhost.html#lemonldapng_configuration" class="wikilink1" title="documentation:1.9:configvhost">créer un nouvel hôte virtuel</a> pour Liferay.
|
|
</p>
|
|
|
|
<p>
|
|
Configurer simplement la <a href="../../../documentation/1.9/writingrulesand_headers.html#rules" class="wikilink1" title="documentation:1.9:writingrulesand_headers">règle d'accès</a>. Il est possible d'ajouter une règle pour la déconnexion :
|
|
</p>
|
|
<pre class="code"> ^/c/portal/logout => logout_sso</pre>
|
|
|
|
<p>
|
|
Configurer l'<a href="../../../documentation/1.9/writingrulesand_headers.html#headers" class="wikilink1" title="documentation:1.9:writingrulesand_headers">en-tête</a> <code>Auth-User</code>.
|
|
</p>
|
|
|
|
</div>
|
|
</div><!-- closes <div class="dokuwiki export">--></body></html> |